Privacy Policy

Webloomery is operated by Fatih Yılmaz, based in Türkiye, who is the data controller for the personal data described in this policy. You can contact the controller about any privacy matter at support@webloomery.com.

Lemon Squeezy, Etsy and Google act as independent controllers for the data they collect through their own services, under their own privacy policies.

• Technical request data: when you visit, our hosting provider processes your IP address, browser and device information, the pages requested and the time of the request, to deliver the site and keep it secure. The storefront also uses your IP address briefly in memory to limit abusive request rates.
• Browser storage: your cart and favorites are saved in your own browser (localStorage) and are not sent to us.
• Purchase data: when you buy directly, Lemon Squeezy shares order details with us, such as your name, email address, country, the product, price, tax and order reference. When you buy on Etsy, Etsy shares the order details its seller tools provide.
• Support and email: if you email us, we receive your email address, your message and anything you include, such as an order reference.
• Email list: if you submit your address to the newsletter form, it is used only for that request; the form does not currently store addresses or add them to a mailing list.

• Delivering and securing the storefront: our legitimate interest in running a safe, working website (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).
• Fulfilling purchases, delivery, refunds and product support: performing the contract you entered into (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).
• Keeping sales, tax and accounting records: complying with legal obligations (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)).
• Answering questions and handling complaints: our legitimate interest, or steps you asked for before a contract (KVKK Art. 5(2)(c) and (f); GDPR Art. 6(1)(b) and (f)).
• Establishing, exercising or defending legal claims (KVKK Art. 5(2)(e); GDPR Art. 6(1)(f)).
• Advertising cookies and similar technologies, if introduced: only with your consent where the law requires it (KVKK Art. 5(1) and 9; GDPR Art. 6(1)(a)).

Direct purchases are processed by Lemon Squeezy, which acts as Merchant of Record: it runs the checkout, takes payment, calculates and collects tax, issues receipts and delivers the product files through My Orders. Lemon Squeezy and its payment processors collect your payment details directly; Webloomery never receives or stores your full card number.

Purchases made on Etsy are processed by Etsy and its payment services under Etsy’s privacy policy.

We use the order details we receive to confirm and support your purchase, handle refunds and keep the records the law requires.

Webloomery has registered with Google AdSense, and the site carries an AdSense account verification tag. That tag does not load advertising code or set cookies. No ads are currently shown, and product and store pages stay ad-free.

If advertising is introduced on content pages, Google and its partners may use cookies and similar identifiers to serve and measure ads, including personalised ads. We will not enable advertising cookies for visitors from the EEA, the UK or Switzerland before a Google-certified consent management platform is in place, and not for any visitor without consent where the law requires it. This policy and the Cookie Policy will be updated before advertising goes live. You can learn how Google uses data at policies.google.com/technologies/partner-sites and manage ad personalisation at adssettings.google.com.

Webloomery does not use analytics services and does not set its own cookies. Lemon Squeezy’s checkout, which opens when you choose to buy, and YouTube tutorial videos, embedded in privacy-enhanced mode and loaded only on product pages that include them, may use their own cookies or storage under their policies. Details are in the Cookie Policy.

Support requests sent to support@webloomery.com are used to answer you, investigate the issue and keep a record of the conversation. Please do not send passwords, private keys or full payment details.

The newsletter form currently confirms requests without storing addresses. If we connect an email-list provider, we will name it here, send only the emails you signed up for and include an unsubscribe link in each one.

We share personal data only with the providers needed to run Webloomery: our hosting provider (Hostinger), our email provider, Lemon Squeezy and its payment processors, Etsy, and YouTube for embedded videos. We do not sell personal data or share it for others’ marketing.

Some of these providers store or process data outside Türkiye and outside the EEA, including in the United States. Such transfers take place only as permitted by Article 9 of KVKK and, where they apply, Chapter V of the GDPR and the UK and Swiss equivalents, for example under standard contractual clauses or where a transfer is necessary to perform a contract you requested. We may also disclose data where the law requires it.

• Hosting and security logs: for the period set by our hosting provider’s logging, unless needed longer to investigate a security incident. Rate-limit data in memory is discarded within minutes.
• Support emails: as long as needed to resolve your request, and afterwards only as long as needed to handle follow-up questions or legal claims.
• Order records: for the periods required by Turkish tax and commercial record-keeping law. Lemon Squeezy and Etsy keep their own records under their policies.
• Browser storage: until you remove items or clear your browser data.
• When data is no longer needed, we delete, destroy or anonymise it in line with KVKK.

The storefront is served only over HTTPS, uses security headers and verifies the signature of every payment webhook. Payment and product-file delivery stay with Lemon Squeezy and Etsy, so Webloomery does not hold card data or product downloads. We limit access to personal data to what is needed to run the service. No system is completely secure; if a breach affects your data, we will notify you and the authorities as the law requires.

Under Article 11 of KVKK you may ask whether we process your data, request information about it, learn the purpose and whether it is used accordingly, learn the recipients in Türkiye or abroad, request correction, deletion or destruction, ask that recipients be told about such changes, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing. We answer KVKK requests within the period the law sets, currently 30 days. If you are not satisfied, you may complain to the Turkish Personal Data Protection Authority (KVKK).

If the GDPR, the UK GDPR or Swiss law applies to you, you may also request access, rectification, erasure, restriction, portability and object to processing based on legitimate interests, withdraw consent at any time without affecting earlier processing, and complain to your local data protection authority.

Residents of other places, including US states with privacy laws, can make the requests their law allows. To exercise any right, email support@webloomery.com. We may ask for information to confirm your identity before acting on a request.

Webloomery sells professional digital products and is not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, contact support@webloomery.com and we will delete it.

We will update this policy when our services, providers or the law change, including before any advertising or analytics service is enabled. The date at the top shows the current version. If a change significantly affects how we use your data, we will make it clearly visible on the site.

Data controller: Fatih Yılmaz, operating Webloomery, Türkiye. Email: support@webloomery.com.